Lucene search

K
cve[email protected]CVE-2015-4162
HistoryJun 02, 2015 - 2:59 p.m.

CVE-2015-4162

2015-06-0214:59:21
web.nvd.nist.gov
20
cve-2015-4162
xxe vulnerability
pan-os
nvd
xml
security
management interface
remote authenticated administrators

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

5.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

47.5%

XML external entity (XXE) vulnerability in the management interface in PAN-OS before 5.0.16, 6.x before 6.0.8, and 6.1.x before 6.1.4 allows remote authenticated administrators to obtain sensitive information via crafted XML data.

Affected configurations

NVD
Node
paloaltonetworkspan-osRange5.0.15
OR
paloaltonetworkspan-osMatch6.0
OR
paloaltonetworkspan-osMatch6.0.1
OR
paloaltonetworkspan-osMatch6.0.2
OR
paloaltonetworkspan-osMatch6.0.3
OR
paloaltonetworkspan-osMatch6.0.4
OR
paloaltonetworkspan-osMatch6.0.5
OR
paloaltonetworkspan-osMatch6.0.6
OR
paloaltonetworkspan-osMatch6.0.7
OR
paloaltonetworkspan-osMatch6.1.0
OR
paloaltonetworkspan-osMatch6.1.1
OR
paloaltonetworkspan-osMatch6.1.2
OR
paloaltonetworkspan-osMatch6.1.3

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

5.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

47.5%

Related for CVE-2015-4162